EXECUTIVE SUMMARY -

1. Cybersecurity threats.

Cybersecurity preparedness is essential in 2018 as the risk of, and associated adverse impact of, breaches continue to rise. The past year redefined the upward bounds of the megabreach, including the Yahoo!, Equifax and Uber hacks, and the SEC cyber-attack. As Securities and Exchange Commission (SEC) Co-Directors of Enforcement Stephanie Avakian and Steven Peikin warned, “The greatest threat to our markets right now is the cyber threat.” No crisis should go to waste. Boards should learn from others’ misfortunes and focus on governance, crisis management and recommended best practices relating to cyber issues.

2. Corporate social responsibility.

By embracing corporate social responsibility (CSR) initiatives, boards are able to proactively identify and address legal, financial, operational and reputational risks in a way that can increase the company value to all stakeholders-investors, shareholders, employees and consumers. Boards should invest in CSR programming as an integral element of company risk assessment and compliance programs, and should advocate public reporting of CSR initiatives. Such initiatives can serve as both differentiating and value-enhancing factors. According to recent studies, companies with strong CSR practices are less likely to suffer large price declines, and they tend to have better three- to five-year returns on equity, as well as a greater chance of long-term success.